The attribute of a system that prevents the release of data to unauthorized individuals. The ability or expectation of an individual or group to reveal information about themselves selectively or not at all

learn more… | top users | synonyms

22
votes
2answers
3k views

How is Skype showing ads from my Google search history?

I can understand when I see the same ads across websites, and ads similar to my search history. Some tracking magic through cookies - fine. But Skype has been showing me ads for exact terms I ...
2
votes
1answer
347 views

Why Skype discloses my IP address to anybody? [closed]

Apparently there is a Skype exploit that allows people to obtain your IP address through your Skype username if you're online. The problem has existed since 2012. There exists countless websites which ...
2
votes
1answer
165 views

Any real-world examples of root certificate store compromises?

Apart from the infamous Superfish/Lenovo case this year, are there any other known cases of a malicious root certificate being installed on a target machine to allow transparent MITM attacks, whether ...
2
votes
3answers
214 views

How can an organization know my age based on my IP address?

My teenage daughter was recently banned from a teen forum. The response we got from the forum administrators explained that she was banned because the IP address revealed that she was "over age" (too ...
5
votes
2answers
157 views

Should Android apps for communication encryption and security require permissions like identity, device ID, contacts, etc.?

There is a Android application Threema for communication encryption and that says it does not collect user data, but it requires the following permissions: identity, contacts and device ID. Can ...
1
vote
0answers
281 views

What are the best ways for an iOS 9 user to protect against device fingerprinting?

In response to this series of questions: What unique device fingerprinting information can an iOS9 app collect? and as an update to this question: What are the best practices for maintaining privacy ...
-2
votes
1answer
333 views

Facebook and people you may know suggestions [duplicate]

I know all the conspiracy theories about if how you search for someone on it they can find out etc but I have a question. We all know Facebook likes to keep its mining secret. Both mine and my ...
5
votes
2answers
159 views

What parts of IPv6 address may I show publicly and safely?

I want to ask question about some network issue, i.e. about printing the IPv6 address correctly. I assume the users expect me to provide some meaningful examples of what I expect and what I have. ...
1
vote
2answers
141 views

Can a “client-initiated” session cookie provide more privacy and security than existing session alternatives?

There are several uses for a cookie, and I would like to offer some kind of guarantee that a cookie is being used for a specific, limited purpose and scope. In my case, I want to prove that a cookie ...
1
vote
3answers
189 views

how to protect my data from malware/spyware that infected my BIOS?

we all know that some countries do their best to spy on their citizens and the citizen of other countries and that countries maybe have specialized spying agencies wither they are known or not, and, ...
1
vote
0answers
157 views

What unique device fingerprinting information can an iOS9 app collect?

As a follow-on to these questions: What unique fingerprinting information can an iOS7 app collect? What unique device fingerprinting information can an iOS8 app collect? Apple has apparently ...
4
votes
2answers
142 views

How can I verifiably demonstrate that steganography or hidden partitions do not exist?

I want to verifiably demonstrate that there are no hidden partitions, or hidden messages in a given message. In this scenario, assume the subject is being monitored (consensually) and agrees to align ...
0
votes
1answer
175 views

How secure are the passwords stored at Google Passwords? [closed]

It seems Google activated central place for storing app/website passwords which is accessible at https://passwords.google.com/ and all the remembered Chrome passwords are synched there. In what ...
1
vote
1answer
120 views

In the United States, when can someone legally search my personal laptop? (Government or private security) [closed]

Unlike the United Kingdom, U.S. citizens don't have an explicit right to privacy in the Constitution. Although there are implied privacy rights within "penumbras" of the Bill of Rights this has ...
0
votes
0answers
11 views

Configuration panel videotron [duplicate]

At the moment I am living in an apartment with some other people. We are students and we will start school in Canada. One guy took internet with Videotron, he manages the internet and we just give ...
0
votes
1answer
81 views

What are specific use cases for anonymity?

There are various technologies for anonymity online, most notably TOR, but also I2P and VPNs, as well as simply using one-shot email addresses. What are the specific use cases for anonymity? I'm not ...
2
votes
1answer
203 views

How secure/private is the browsing history on browsers?

I've been using Aviator secure browser for a while which insists that you run private mode by default (cookies and history wiped after every session), which makes me wonder how secure the history is ...
0
votes
0answers
33 views

Should universal delete, or “the right to be forgotten”, be an extension to OpenID Connect “signout” or authentication in general?

There are different levels of maturity various OpenID connect implementations may have. One of the optional features is the session management and sign out feature. Now that this has finally ...
23
votes
7answers
3k views

When do honest people need privacy or anonymity? (e.g. they have nothing to hide) [closed]

I'm having a discussion with someone who thinks they don't need technical measures of privacy or anonymity. Common arguments against needing to care about privacy or anonymity include: Everything ...
3
votes
1answer
149 views

Storing personal information in cookies

I'm trying to do a simple display integration between two websites. One on: domain.com and another on: subdomain.domain.com All I want to do is show a "Hello John, Return to Client Area" ...
7
votes
2answers
703 views

Privacy of my company's guest Wi-Fi [duplicate]

I use my company's guest Wi-Fi along with another maybe 1500 other people across our site. On my breaks I access some random chat servers. Can my company see and hear my conversation?
5
votes
3answers
108 views

Stalking and harassment [closed]

I believe my ex wife is redirecting my Yahoo and Google accounts and somehow has access to anything I do online. How can I know if my suspicions are true? She is director of I.T. of a large company, ...
2
votes
0answers
2k views

Just how intrusive IS Cortana? [closed]

According to Microsoft's privacy statement: To enable Cortana to provide personalized experiences and relevant suggestions, Microsoft collects and uses various types of data, such as your device ...
4
votes
3answers
290 views

Using Tor browser on a Windows machine

Suppose a person is running a Windows 7/8 operating system. If she/he uses the TOR web-browser, can Microsoft see what they are browsing? Would that not defeat the point of using TOR in the first ...
4
votes
1answer
96 views

Browsers root CA accepted, countries and checking fingerprints

This is a question derived from several others, and I can not comment on those, so it is not duplicated, please read: In some related questions some users comment that: "They wouldn't ...
-2
votes
2answers
69 views

Is there any way to formally ensure privacy to my clients by technical means?

Imagine you are a software solutions company. One of the solutions you provide are domains, email and forwarding mail to their Gmail accounts. After we have created a domain and several email ...
1
vote
1answer
55 views

Resellers and web admins and email privacy

Maybe I'm missing something, but this is "my problem". If you ask some company to create some domain for you and several e-mail account with that domain and forward that information to your gmail ...
9
votes
2answers
13k views

Why do some companies ask last 4 digits of my SSN or a scan of my ID? What are my risks?

Yesterday I found out that some major service provider (online rentals) that I use now requires proof of my identity if I want to continue and make a booking. I was offered 2 options: 1) Enter last ...
-3
votes
1answer
58 views

Freedom method for anonymity

In a book I am reading, a system called Freedom is mentioned as a means to protect user privacy. Though at some point it mentions that it uses multiple proxies, so even if a node behaves maliciously ...
1
vote
2answers
83 views

Mobile Phone security - help finding security/privacy review/discussion [closed]

I'm in the market for a new phone, and was wondering which modles/operating systems are the best to protect privacy/security. I don't use social media, so won't have Facebook/Twitter,etc. I am fairly ...
4
votes
2answers
234 views

Is it a good or bad practice to fake user agent?

I'm using a mobile browser. I found a program that can fake my User Agent (UA), so I changed to something else. Is this good practice or bad practice in terms of preserving privacy?
0
votes
0answers
121 views

How can secure email be used while avoiding government attention?

Presumably all unencrypted email is available to federal agencies including IP addresses, header information, and email content (eg, through SMTP with or without SSL and TLS -- thunderbird has an ...
-7
votes
1answer
153 views

Is Google intercepting my emails? [closed]

I was recently checking my Recent Activity under the "Details" tab inside my Gmail inbox, and I noticed this IP Address, it's not my IP: I proceeded to look up the IP and it's located in Mountain ...
5
votes
1answer
136 views

What are the compliance requirements or standards for a non-US firm hosting personal data in the US?

I work for a head hunting company with offices in Canada and Asia. We migrated our custom built CRM system from our own servers hosted in Japan to an Amazon hosting service meaning that all our data ...
4
votes
1answer
98 views

How accurate the recent activities location provided by Microsoft emails

One of my emails is on hotmail.com provided by Microsoft. Recently, after few suspicious incidents where my computer was hacked and many other accounts, I changed all my passwords including this ...
-1
votes
3answers
113 views

Why has there been a complete focus on privacy against the government but not against everybody else? [closed]

Not sure why the concern on privacy has been focused on the government. There has been no mention for people on the ability of their companies, exes, and even the random stalker to snoop their online ...
1
vote
1answer
85 views

Do file hosting services check user data manually by human? [closed]

I wonder if file hosting services like Dropbox, MediaFire, OneDrive, Google Drive, etc. manually check user data for piracy or copyright infringement. Although their terms of service always say that ...
-1
votes
1answer
121 views

Is someone reported a video to the fbi, would the IP address be traced? [closed]

Supposedly, if someone were to report a video to the fbi, if anyone watched that video, would their ip address be traced down?
0
votes
1answer
83 views

Should a Web Search with Evernote results be a concern?

While using a Chromium based browser (Chromodo) and doing a regular Google search, Evernote is now appearing on the side with "related results in your notes". Does anyone know how they are doing ...
7
votes
5answers
326 views

Can a website detect my local WIFI network I am in?

I have two computers, both of them locate at the same local WIFI network ( ie: connected to the same router). I use VPN on a computer to visit a website, and don't use VPN on another to visit the ...
2
votes
1answer
112 views

Hushmails “Secure Forms” & HIPAA

I just picked up a job for integrating Hushmail's Secure Web Forms into a medical website. The forms will submit patient's (PHI) data to Hushmail's servers, encrypt the data, and then send it to their ...
13
votes
1answer
1k views

Which parts of an HTTPS connection can be revealed? [duplicate]

Say, I use a public WiFi connection to load https://google.com in the browser, and then continue browsing on that site for a few more pages (performing searches in Google). Can anyone else (like ...
5
votes
1answer
116 views

Are images created with commercial software stamped with identifiers that can be traced back to a serial number?

To the best of your knowledge, do images created with Photoshop and/or other commercial software embed any bits of information that can allow someone (governments, security agencies?) to trace the ...
-1
votes
2answers
138 views

Can the payer of my cell bill listen to my calls? [closed]

I am not an IT person so I'd need a simply-worded answer. I'm considering getting a smart phone, and someone else would be paying the bill, someone I don't necessarily trust. I'd like to know: would ...
7
votes
2answers
135 views

What are the security benefits to block all http referer header requests for web browser?

I would like to know also if you lose site functionality. Is this a security benefit that is beneficial than compromising functionality (if compromising at all)? What I mean by this is one a ...
53
votes
6answers
9k views

Why do security experts like Snowden use email services like Lavabit and Hushmail rather than self-hosted email?

Why would anyone like Edward Snowden rely on 3rd party services like Lavabit or Hushmail to host his email? I mean it's very easy to set up a self-hosted email server. What you need: Rent VPS (even ...
1
vote
1answer
238 views

Is it there any effective way to prevent shodan to access my webcams [duplicate]

Recently while browsing using shodan, I came across a search string to explore webcams. Some of the searches I carried out were: webcamxp city:city name webcamxp geo: longitude and latitude ...
5
votes
2answers
174 views

Cryptographic algorithm to anonymise strings in pronounceable fashion?

NB: I originally posted this on SO (link), but then realise Security SE be more suitable, since there's existing questions around Crypto-PAn, which is similar here I have a logfile of database ...
3
votes
1answer
1k views

Can my ISP/MSP read my Whatsapp messages?

I wonder whether the Whatsapp messages are sufficiently encrypted so that the ISP/MSP ( mobile service provider) cannot read what is inside? I will be travelling to some of the most oppressive ...
0
votes
0answers
105 views

How 'private' is my setup?

I'm currently running QubesOS (so essentially a virtualized Fedora operating system), which I use to access an offshore VPS through I2P (using garliccat). I then route all my traffic through the VPS ...